Dns (bind)
 

Hi all. Just wondering if any of you could help me out here.

Basically, I have two servers here and one external IP address.

I have MX records on the internet for both machines pointing at the same external IP address.

linux.njdownes.com is the name of the DNS server (web server also running) which points to 80.7.13.151
I also have njd-vaio.njdownes.com (mail and web server running on this server) set up to point to 80.7.13.151.

The internal IP's are:

192.168.2.2 - linux.njdownes.com
192.168.2.3 - njd-vaio.njdownes.com

I basically need to set my DNS server up, so that requests hitting the DNS server for njd-vaio.njdownes.com get forwarded on to njd-vaio.njdownes.com.

I tried doing this before, but when doing an nslookup on the DNS server, you would get the external IP and the internal IP shown.

Any help with this would be appreciated.

If I've left any info that you need to know out, let me know.


Many thanks in advance.

I'm not entirely sure what you're trying to do. You've only got one public IP address, so all externally available services need to be using that IP address. The easy solution is to put all of the services on one physical machine - DNS, Web and mail all have very low starting requirements (i.e. at least a 486). You can also use port forwarding so that whatever machine is on the external IP address forwards connections for particular ports to another machine. Your Linux box can do port forwarding for any ports you like, or you can assign the external IP to a router which will host no services of it's own but merely forward connections to the appropriate Linux box.

Hope that helps

Thanks for the advice.

I'm doing exactly what you said at the minute - simple and it works.

Though, I'd like to know how to sort out a zone that could be used internally only.

Would I have to set up a zone for 192.168.2.x and then set ACL's so that it is not externally viewable?
I tried it before but the internal IP and external IP were showing when doing a DIG of NSLOOKUP on the internet.

OK, I think I understand - your forward lookup zone has internal IPs in it that shouldn't be shown to outside systems.

It's not a huge security issue as private IPs addresses obviously can't be reached, but I beleive that you can define "views" on zones with BIND 9 so that different systems get different results.